Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/5c05d82b-da3b-3d38-b030-341d7164dfec.roa
File:                     5c05d82b-da3b-3d38-b030-341d7164dfec.roa (raw, json)
Hash identifier:          0ekRYW9ADGBCm6QMYVbhthr7pj7Wa5vF2jh/nyG/6dU=
Subject key identifier:   C0:11:65:A7:F2:52:85:1E:F0:18:65:35:3D:5D:60:92:E6:7C:08:C0
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F4328584F0548B9A3493731696CD0B540
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/5c05d82b-da3b-3d38-b030-341d7164dfec.roa
Signing time:             Mon 31 Aug 2026 15:01:01 +0000
ROA not before:           Mon 31 Aug 2026 15:01:01 +0000
ROA not after:            Sun 29 Nov 2026 16:01:01 +0000
asID:                     399007
IP address blocks:        153.75.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:48:b9:a3:49:37:31:69:6c:d0:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: Aug 31 15:01:01 2026 GMT
            Not After : Nov 29 16:01:01 2026 GMT
        Subject: CN=2c386e1c-0c9e-4aa7-8df5-9925d03d8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:e6:04:18:08:12:d2:5b:29:27:34:5e:86:
                    30:46:ce:b1:cb:4b:2d:3f:8f:be:e3:f5:d4:63:89:
                    ee:ac:1c:14:30:23:16:c9:87:ca:a9:f2:70:85:f8:
                    b0:45:53:74:04:3f:0a:4e:86:82:63:b8:89:4b:e2:
                    82:13:2c:f1:80:a7:57:72:6f:c7:07:64:59:56:6b:
                    28:fb:84:8e:a4:81:4c:84:e3:28:16:3b:e0:7a:b9:
                    a0:26:80:2f:98:23:96:20:5f:4c:a0:5c:73:4a:1d:
                    d6:12:df:dc:b7:ce:3b:84:e8:75:8c:96:be:47:a1:
                    35:d0:07:1a:f4:f1:5f:a6:00:3a:58:0a:06:d0:dd:
                    f0:3f:69:42:40:8a:70:b0:49:97:61:47:bc:e2:b9:
                    91:7c:1c:91:a1:9f:f9:a6:46:e4:07:97:fa:76:ff:
                    90:ae:6d:cf:09:24:19:1a:f1:ec:a9:f4:89:1c:82:
                    e8:c3:0e:a0:5f:7e:30:15:06:29:85:f8:74:41:aa:
                    a3:fb:6a:01:29:3b:16:0d:ab:51:76:e2:d4:f2:b5:
                    ef:23:47:84:8e:26:9b:1b:5d:7b:74:26:f4:f8:19:
                    d2:18:55:66:ad:df:96:53:0f:c4:56:7c:02:0c:42:
                    33:72:1a:9f:ea:24:7a:94:8a:86:aa:59:66:ce:0e:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:65:A7:F2:52:85:1E:F0:18:65:35:3D:5D:60:92:E6:7C:08:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/5c05d82b-da3b-3d38-b030-341d7164dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.75.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:92:04:17:41:3b:d5:d4:86:29:3d:a2:2e:64:d4:33:64:
         a3:68:80:25:89:67:98:ef:8e:01:5d:e7:c3:1c:2b:ac:2b:55:
         52:e3:8e:4b:19:01:f8:8a:5b:6b:e7:d3:a1:ce:0f:ee:a6:86:
         32:90:b6:eb:87:f7:2b:80:92:17:fd:f6:49:9b:d6:e0:15:b8:
         fa:83:51:68:8b:03:82:af:4d:35:56:87:83:9c:4c:75:02:be:
         b8:08:0a:e2:f5:67:dc:46:24:bb:66:e2:14:42:d0:bc:d8:53:
         0e:e7:66:d8:73:d0:ef:ef:2b:14:ca:08:97:22:16:37:dc:f8:
         c7:2a:39:ce:36:5c:38:e2:39:43:cb:5a:3c:91:b4:f5:95:a2:
         78:f2:84:2a:bd:fb:8a:68:11:75:a6:72:26:33:c5:2c:ad:72:
         4d:40:56:e1:b8:29:b2:7d:42:84:ad:05:5e:d1:09:3c:f5:98:
         fd:2b:1d:b9:ea:ae:bd:4a:e0:81:b3:16:e6:7c:39:c7:43:b4:
         55:7d:bb:33:b2:a1:6b:e9:e5:77:f5:55:75:21:50:b4:60:46:
         49:ca:a3:96:5f:8e:d1:f5:05:1d:92:30:92:94:3f:00:ca:58:
         e0:ff:49:2e:d8:ce:6a:58:78:6f:a0:e2:10:1e:71:6f:d0:b7:
         a9:3a:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:39 2026 by rpki-client